FEDORA-2022-2cfbe17910 — security update for kernel

stable

kernel-5.19.15-201.fc36

FEDORA-2022-2cfbe17910 created by jforbes a year ago for Fedora 36

The 101/201/301 builds of the 5.19.15 kernel contain fixes for some wireless network vulnerabilities and a couple of important arm bug fixes.

The 5.19.15 stable kernel update contains a number of important fixes across the tree.

Reboot Required

After installing this update it is required that you reboot your system to ensure the changes supplied by this update are applied properly.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2022-2cfbe17910

This update has been submitted for testing by jforbes.

a year ago

This update's test gating status has been changed to 'waiting'.

a year ago

This update has obsoleted kernel-5.19.15-200.fc36, and has inherited its bugs and notes.

a year ago

tiberias commented & provided feedback a year ago

karma

Default & performance tests pass (KVM)

Test Case kernel regression

This update's test gating status has been changed to 'passed'.

a year ago

nixuser commented & provided feedback a year ago

karma

Working OK in a VirtualBox VM. Kernel regression tests are passing.

Test Case kernel regression

t3rm1n4l commented & provided feedback a year ago

karma

wfm

Test Case kernel regression

This update has been submitted for stable by bodhi.

a year ago

markec provided feedback a year ago

karma

ibims provided feedback a year ago

karma

Test Case kernel regression

imabug provided feedback a year ago

karma

Test Case kernel regression

itrymybest80 provided feedback a year ago

karma

Test Case kernel regression

jforbes edited this update.

a year ago

bretth commented & provided feedback a year ago

karma

Default & performance tests pass (KVM)

Test Case kernel regression

This update has been pushed to stable.

a year ago

geraldosimiao commented & provided feedback a year ago

karma

Works on Acer Aspire Intel® Core™ i7-3632QM CPU @ 2.20GHz Memory: 15.4 GiB of RAM Graphics Processor: Mesa DRI Intel® HD Graphics 4000. wi-fi: Qualcomm Atheros AR9485 Wireless Network Adapter vendor: Lite-On driver: ath9k v: kernel pcie: speed: 2.5 GT/s lanes: 1 Passed ALL kernel regression tests.

Test Case kernel regression

boatrigm commented & provided feedback a year ago

Issues with accessing local network like TrueNAS SMB shares and http. Went back to .14 and all works.

py0xc3 commented & provided feedback a year ago

karma

Sorry, I'm late :) I have little time at the moment.

./runtests.sh PASS on 5.19.15-201.fc36.x86_64 with Intel Core i7-4720HQ, NVIDIA GM204M [GeForce GTX 970M] driver: nouveau

cat /proc/sys/kernel/tainted 
0

It boots properly & I experience no issues so far. It works properly as virtualization/KVM host including PCI passthrough (intel_iommu=on). No issues.

./runtests.sh -t performance not yet tested.

Test Case kernel regression

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

passed

Builds

kernel-5.19.15-201.fc36

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

14 days

Dates

submitted

a year ago

in stable

a year ago

modified

a year ago

BZ#2128462 CVE-2022-40768 kernel: leak of sensitive information due to uninitialized data in stex_queuecommand_lck() in drivers/scsi/stex.c

BZ#2128463 CVE-2022-40768 kernel: leak of sensitive information due to uninitialized data in stex_queuecommand_lck() in drivers/scsi/stex.c [fedora-all]

BZ#2133490 CVE-2022-3435 kernel: an out-of-bounds read in fib_nh_match of the file net/ipv4/fib_semantics.c

BZ#2133491 CVE-2022-3435 kernel: an out-of-bounds read in fib_nh_match of the file net/ipv4/fib_semantics.c [fedora-all]

BZ#2134177 kernel crash on a number of rockchip rk3399 devices on boot

BZ#2134377 CVE-2022-41674 kernel: u8 overflow problem in cfg80211_update_notlisted_nontrans()

BZ#2134440 CVE-2022-42719 kernel: A use-after-free problem observed in multi-BSSID element when parsing

BZ#2134451 CVE-2022-42720 kernel: A use-after-free problem was observed in bss_ref_get in net/wireless/scan.c

BZ#2134465 CVE-2022-41674 kernel: u8 overflow problem in cfg80211_update_notlisted_nontrans() [fedora-all]

BZ#2134469 CVE-2022-42719 kernel: A use-after-free problem observed in multi-BSSID element when parsing [fedora-all]

BZ#2134470 CVE-2022-42720 kernel: A use-after-free problem was observed in bss_ref_get in net/wireless/scan.c [fedora-all]

BZ#2134506 CVE-2022-42721 kernel: BSS list corruption in cfg80211_add_nontrans_list in net/wireless/scan.c

BZ#2134507 CVE-2022-42721 kernel: BSS list corruption in cfg80211_add_nontrans_list in net/wireless/scan.c [fedora-all]

BZ#2134517 CVE-2022-42722 Kernel: Denial of service in beacon protection for P2P-device

BZ#2134579 CVE-2022-42722 kernel: Denial of service in beacon protection for P2P-device [fedora-all]

kernel-5.19.15-201.fc36

Automated Test Results

passed

Test Cases


0	9	Test Case kernel regression